If you go to the storage section there is an option to change the location your apps automatically install to. For instance, on a tablet you may want to save to an external USB or microSD if your internal memory is small.
This option was enabled during the Insider builds and disabled at 10240. It was stated that it would be reenabled or return at a later date. I'm still on 105xx so it may be enabled now but I cannot get on my PC right now. (Bitlocker issue).
A virtual pornbox?
They can not easily configure the system to say let me log in to hyper-v and only manage 3 servers while they manage the other 5. So in a case like this they could create 2 VMs under the main one, one that I have administrator access to and the other one just for IT. Then I can manage my VMs, they manage theirs and all on the same hardware.
If you want your main computer to hoover every malware and virus there is to offer from the porn site perhaps. Most don't want that.
You can delegate permissions inside of System Center Virtual Machine Manager and then present only things you have access to via System Center App Controller. Sounds like you have a smaller environment, so it might not be worth the cost and time, but it is possible and really not that difficult to do.
I guess some people would have a need for that. Although I can't imagine that being anything used by most people.
I've done this with Vmware VMs running Hyper-V within for a while now. It allows me to build full Hyper-V Fail-over Clusters for Labs, all within a single server.
It can get a bit mind bending however, if you server naming scheme is not well thought out. Not exactly quick either, but perfectly fine for testing out scenarios. Glad to see it will be native to Hyper now, might even improve performance too.